Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer
File:                     9F93097BE8B711227435ABF870C332F631C8D769.cer (raw, json)
Hash identifier:          nY+jhn10J15OK+PjGDbGCQK/HF4Yypu+B9fDJb6nyKM=
Subject key identifier:   9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       18F2758A371BEAEFC2F9EFE3571AD16BB8C83EB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Jul 2025 10:39:08 +0000
Certificate not after:    Thu 16 Jul 2026 10:44:08 +0000
Subordinate resources:    IP: 103.215.62.0/23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 00:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f2:75:8a:37:1b:ea:ef:c2:f9:ef:e3:57:1a:d1:6b:b8:c8:3e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 17 10:39:08 2025 GMT
            Not After : Jul 16 10:44:08 2026 GMT
        Subject: CN=9F93097BE8B711227435ABF870C332F631C8D769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:8b:3c:29:80:fc:ab:2e:9c:3c:2a:86:f3:
                    45:af:8a:d4:73:07:c2:9b:ed:84:66:0b:e8:3f:48:
                    c4:76:d6:a4:03:7b:ad:e8:1f:be:df:19:f0:33:b6:
                    34:09:89:b8:27:ce:ad:8d:93:db:c0:be:57:e5:26:
                    fa:70:42:39:d6:5b:89:90:31:53:46:a3:7f:c8:0c:
                    bb:03:24:c0:f0:b4:ed:aa:03:c7:05:4d:9c:ad:6b:
                    75:6b:f4:17:3c:54:df:be:07:9e:6d:ec:0e:b1:0d:
                    f5:38:ab:8d:2e:b7:51:56:3e:a1:10:94:2e:0b:a3:
                    a4:38:ea:d4:0b:80:44:73:8c:9d:9f:64:9d:17:a8:
                    dd:d9:76:76:62:3b:56:a8:a4:30:4f:ac:d0:31:b1:
                    cc:4d:a3:d1:eb:bb:02:96:be:e8:9b:f5:69:26:77:
                    6a:ae:d8:bd:92:24:ca:10:7d:ad:e3:cc:11:50:12:
                    aa:05:e7:e2:b9:eb:6f:63:2a:1b:26:a5:a9:87:36:
                    52:dc:5e:bf:a8:09:30:63:ad:31:2a:f1:0b:e9:b6:
                    53:7f:b0:5f:6e:40:07:42:eb:d5:36:34:17:51:e5:
                    cb:f2:8e:8d:16:d1:b0:43:ae:38:ca:ed:02:75:77:
                    af:fa:c9:fa:60:15:16:78:4f:39:09:fa:81:a6:ed:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:7f:ad:bf:6c:a6:fd:5d:8d:bf:cb:9b:69:9a:2d:94:37:
         96:99:fc:65:6f:c6:b4:13:37:02:57:2d:bc:33:01:36:57:e2:
         ae:3c:b5:c8:95:ee:0b:a8:88:2b:1c:5f:5a:5f:18:b3:6c:98:
         7c:5d:b9:c6:08:e6:26:24:62:e7:80:98:2f:eb:28:7e:20:e2:
         da:b8:a7:9c:88:48:0a:97:49:5c:46:86:8a:04:1c:d2:39:e2:
         34:0b:1d:7f:dd:e5:07:0b:5a:3a:2a:b7:ff:72:46:7d:a1:6e:
         ff:2d:f7:f9:c1:f3:b2:6f:40:62:b0:82:5c:7b:c3:d7:d2:45:
         a2:34:9f:08:b0:ad:88:fa:d6:e0:26:06:bd:55:f1:27:d8:36:
         cc:2a:bc:0c:de:dd:80:df:68:6b:57:18:93:ae:59:ca:69:7e:
         f1:7a:a4:68:29:8c:d7:79:af:0d:b3:7a:66:af:09:0f:11:ac:
         d2:b6:3e:7d:5e:72:f8:89:27:06:34:8f:b5:31:8c:d7:32:7e:
         60:6a:b1:68:92:ba:3d:8e:f3:2f:a6:4c:8a:d1:74:f1:aa:97:
         f7:a1:0b:43:d1:64:98:c5:1b:22:5f:86:e8:3a:9e:bc:8f:86:
         fc:c2:45:c3:3a:db:f0:d2:df:95:94:4b:3f:67:98:0a:7e:67:
         17:5e:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:29:30 2025 by rpki-client